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• The Federal Aviation Administration said it would bar airports nationwide from using a 
traffic -reversing operation that led to a close call July 31 involving three commuter flights 
at Ronald Reagan Washington National Airport. - Associated Press (See item 16) 

• Federal safety regulators sought up to $162.4 million in fines against American Airlines 
and its affiliates for alleged violations of U.S. safety standards going back several years. - 
Associated Press (See item 17) 

• A southeastern Montana wildfire destroyed a Montana Highway Patrol communications 
tower and knocked out transmissions between dispatchers and troopers in nine counties. - 
Associated Press (See item 34) 

• A security breach at the Hoover Dam near Las Vegas, stalled traffic for hours after a 
pickup truck blew through a security checkpoint and sparked a SWAT team standoff 
August 7. - KSNV 3 Las Vegas (See item 47) 
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Energy Sector 



1. August 8, Associated Press - (North Dakota) TX man accused of murder in ND oil 
patch shooting. A Texas man accused in a fatal shooting August 4 at a crew camp in 
the western North Dakota oil patch was formally charged with murder, attempted 
murder, and terrorizing. The suspect is accused of killing one man and injuring another 
man, who was treated at a hospital and released. Authorities said the shooting happened 
late at night at the crew camp near Tioga. All three men were working for a Wisconsin- 
based pipeline company. The Williams County chief deputy said the suspect also is 
accused of threatening two other company workers. 

Source: http://fuelfix.com/blog/2012/08/08/former-wife-of-nd-oil-patch-shooting- 
victim-reacts/ 

2. August 8, Montgomery News - (Pennsylvania) Four accused of stealing copper from 
Limerick nuclear plant, other power substations. Four people who allegedly stole 
copper from several PECO substations, including one on Exelon Nuclear’s Limerick 
Generating Station property in Limerick, Pennsylvania, were charged with felony 
burglary and related offenses, Montgomery News reported August 8. Lower Pottsgrove 
and Limerick police departments allege the four conspired and participated in varying 
capacities in burglarizing many PECO substations throughout Limerick, West 
Pottsgrove, Pottstown, and Lower Pottsgrove in 2010 and 2011, according to court 
documents. Local investigators met with one suspect in March 2012 after he became a 
suspect in copper thefts from surrounding substations from several power companies in 
Pottstown and Berks County after he “nearly lost his life during a theft of copper” in 
Berks County, said court documents. Investigators said the thefts resulted in tens of 
thousands of dollars in damage. Investigators note that a suspect detailed how during 
the burglaries he, his wife, and two accomplices would drive to the location where the 
burglary would take place, and on most occasions his wife would drop him and at least 
one of the other two off at the location to carry out the alleged burglary. 

Source: 

http://www.montgomervnews.com/articles/2012/08/08/springford reporter valley ite 
m/news/doc50228288 194720740651 83.txt?viewmode=fullstory 

3. August 8, WAAY 31 Huntsville - (Tennessee) Natural gas pipeline explosion forces 
evacuation. Residents in Lawrence County, Tennessee, returned to their homes after 
being evacuated the night of July 7 because of a natural gas pipeline explosion. The 
explosion and fire that followed forced an evacuation in a 3-mile radius of 
Summertown. Police said a car hit the pipeline at the intersection of Monument Road 
and Highway 20, triggering the explosion. The driver died in the crash. The fire lasted 
for more than 3 hours before firefighters were able to bring it under control. 

Source: http://www.waavtv.com/news/local/storv/Natural-gas-pipeline-explosion- 
forces-evacuation/ur7kld8O6ECSK7iE0iV6yg.cspx 

4. August 8, Pittsburgh Tribune-Review - (Pennsylvania) Hazmat crews worked 8 hours 
to contain tanker truck fire in Millvale. Lirefighters responded to a tractor-trailer fire 
in Millvale, Pennsylvania, preventing it from reaching the 9,000 gallons of gasoline it 
carried August 7. The tractor-trailer was fully engulfed when firefighters were called to 
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the vacant lot where the driver parked it, a Millvale Volunteer Fire Department captain 
said. Firefighters evacuated residents and began to deluge the truck with water. “If it 
would’ve exploded, it would have been a catastrophe,” he said. HAZMAT crews then 
got the fuel leak under control. The truck driver said he first noticed trouble when 
smoke began pouring from the cab, so he pulled over. “Within a minute or two, the cab 
was on fire,” the fire captain said. 

Source: http://triblive.com/news/2370167-74/tunstall-fire-millvale-firefighters-truck- 
cab-driver-quickly-tractor-trailer 

5. August 7, Associated Press - (Indiana) 2 men hurt in blast at Indianapolis power 
plant. Indianapolis Power and Light (IPL) said two workers were hurt in an explosion 
August 7 at an Indianapolis power plant. An IPL spokeswoman said the two men were 
taken to a hospital with non-life-threatening injuries. WTHR 13 Indianapolis reported 
the explosion happened in the area of coal pulverizers at IPL’s generating plant on the 
city’s south side. No customers lost service. 

Source: http://www.14news.com/storv/19212477/2-men-hurt-in-blast-at-indianapolis- 
power-plant 

[ Return to top ] 

Chemical Industry Sector 

6. August 8, East Liverpool Review - (Ohio) OSHA inspections lead to fines. A local 
company that operates a hazardous waste incinerator in the East End in East Liverpool, 
Ohio, was assessed fines of more than $150,000 by the U.S Department of Labor’s 
Occupational Safety and Health Administration (OSHA), the East Liverpool Review 
reported August 8. Heritage-WTI Inc. was cited for a variety of violations following 
two separate inspections, including one deemed “willful” for failing to review and 
annually certify operating procedures for the process of safety management of 
hazardous chemicals. For this violation alone, the company was fined $63,000. In 
announcing the latest citations, OSHA gave the company until September 5 to comply, 
request an informal conference, or contest the citations and penalties before an 
independent OSHA Review Commission. 

Source: http://www.reviewonline.com/page/content.detail/id/558475/OSHA- 
inspections-lead-to-fines.html?nav=5008 

7. August 8, Associated Press - (New York) 5 companies agree to clean up Albany - 
area mercury-contaminated Superfund site. Five companies reached a settlement 
with the U.S. Environmental Protection Agency (EPA) to clean up mercury 
contamination at an Albany, New York site, the Associated Press reported August 8. 
The EPA said the legal settlement will address soil, sediment, and ground water 
contaminated with mercury at the Mercury Refining Company site in the towns of 
Colonie and Guilderland. The agreement was reached with Gillette Company, KeySpan 
Gas East Corp., Energizer Battery Manufacturing, Union Carbide, and Spectrum 
Brands. From the 1950’s until 1998, mercury from batteries, thermometers and other 
products was recovered, refined, and marketed by the Mercury Refining Company. The 
value of the cleanup work to be performed under the agreement is estimated at $9.3 
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million. 

Source: 

http://www.therepublic.com/view/story/52880109cc9b4d69bl Ilfl59d23367cd/NY— 
Mercury-Cleanup 
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Nuclear Reactors, Materials and Waste Sector 

8. August 8, Associated Press - (New Hampshire) NRC plans more oversight at NH 
nuclear plant. The Nuclear Regulatory Commission said that the Seabrook Station 
Nuclear Power Plant in Seabrook, New Hampshire, will receive additional oversight 
following an inspection finding from an emergency exercise, the Associated Press 
reported August 8. The commission said that during an April exercise, plant personnel 
did not develop and make proper initial protective action recommendations to States, 
based on radiological conditions at the time. However, their recommendations did 
become correct as the exercise went on. The commission will conduct a supplemental 
inspection at Seabrook to evaluate its evaluation. 

Source: http://www.boston.com/news/local/new-hampshire/2012/08/08/nrc-plans- 
more-oversight-nuclear-plant/cZgt2drGeVmNiKh6ZtDiP/story.html 

9. August 7, Nuclear Power International - (National) NRC freezes new nuclear power 
plant licenses, license renewals. The Nuclear Regulatory Commission (NRC) August 
7 voted to put a hold on making final decisions on combined construction and operating 
licenses (COLs) for new nuclear power plants and 20-year license renewals for existing 
plants in response to the Waste Confidence Rule decision June 8 by the U.S. Court of 
Appeals for the D.C. Circuit. The hold was not expected to impact current hearings and 
assessments for COLs and license renewals due to the length of time they will take to 
be reviewed. The court threw out the NRC rule that permitted licensing and re- 
licensing of nuclear reactors based on the supposition that the agency would find a way 
to dispose of spent reactor fuel to be generated by reactors at some time in the future 
when it becomes “necessary” and in the meantime, spent fuel can be stored safely at 
reactor sites. 

Source: http://www.power-eng.com/articles/2012/Q8/nrc-freezes-new-nuclear-power- 
plant-licenses-license-renewals.html 

For another story, see item 2 
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Critical Manufacturing Sector 

10. August 7, U.S. Department of Labor - (South Dakota) U.S. Department of Labor’s 
OSHA cites Adams Thermal Systems in Canton, S.D., with 51 violations for 
exposing workers to variety of safety and health hazards. The U.S. Department of 
Labor’s Occupational Safety and Health Administration August 7 cited Adams 
Thermal Systems Inc. in Canton, South Dakota, with 51 safety and health violations 
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following a February inspection prompted by a complaint alleging multiple concerns at 
the coolant core manufacturing facility. Proposed penalties totaled $225,000. A total of 
44 serious safety violations cited included failing to provide mark emergency exits, and 
keep pathways free and unobstructed; ensure that lockout devices prevented unintended 
equipment startup; provide fall protection on open-sided platforms; remove defective 
rigging equipment from service; properly store gas cylinders; provide safety training; 
and label hazardous gas piping. Three other-than-serious violations were also cited. 
Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEAS 
ES&p id=22803 
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Defense Industrial Base Sector 



Nothing to report 
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Banking and Finance Sector 

11. August 8, Softpedia - (International) Shylock trojan injects attacker’s phone number 
into bank websites. Symantec experts identified a new version of the Shylock trojan 
that comes with a cleverly designed configuration file used to inject a piece of 
JavaScript that contains the cybercriminal’s phone number into the contact Web page 
of a banking site, Softpedia reported August 8. If the victim calls the bank, she will 
have a conversation with the attacker, instead of the financial institution’s 
representatives. There are two plausible scenarios for this type of attack: the crooks 
want to harvest sensitive data via phone, or they want to prevent the victim from 
reporting fraudulent activity. A message injected into the banking site reads like a 
typical contact message with the injected phone number included in the text. Currently, 
the main targets of Shylock are users from the United Kingdom, the United States, and 
Canada. 

Source: http://news.softpedia.com/news/Shvlock-Troian-Iniects-Attacker-s-Phone- 
Numbers-into-Bank-Websites-285697.shtml 



12. August 8, The H - (International) ZeuS trojan increasingly targets German 

mTANs. Kaspersky Lab discovered new versions of the Zeus trojan apps for Android 
and BlackBerry devices that are mainly going after mobile transaction authentication 
numbers (mTAN) for online banking, The H reported August 8. The attacks primarily 
target users in Germany, Spain, and Italy where the mTAN system is commonly used 
by banks to improve security. Smartphones are infected via a Windows PC that is 
infected with the Zeus trojan. Upon opening an online banking Web site, the trojan 
may, for example, inject an alert saying that new certificates must be installed on the 
smartphone for security reasons. Bogus certificates or security updates are then offered 
as downloads or, in some cases, are sent directly to the user’s registered mobile number 
via an SMS message. The trojan app then secretly forwards the SMS messages that 
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contain the mTANs to another number. 

Source: http://www.h-online.com/security/news/item/ZeuS-troian-increasingly-targets- 
German-mTANs-1663481.html 



13. August 7, Los Angeles Times - (California) Man pleads guilty in stock scam linked to 
Notre Dame hero ‘Rudy’. A Long Beach, California man admitted to his role August 
7 in orchestrating a “pump-and-dump stock scheme” around a sports drink company 
built around the name of a famous University of Notre Dame football player. The man 
pleaded guilty to one count of conspiring to commit securities fraud. The plea deal 
requires him to pay full restitution to the more than 250 victims of the scheme, which 
prosecutors alleged generated a profit of more than $5 million. Money-laundering 
transactions also netted more than $1 million. Federal prosecutors allege that he and 
others traded on the name of the football player, the sports drink’s namesake, to pump 
up the value of the drink company before dumping about 600 million shares of RUNU 
stock on the market. He fled the country during the investigation into the company but 
was arrested in January in Johannesburg, South Africa, by special agents with U.S. 
Immigration and Customs Enforcement’s Homeland Security Investigations, and South 
Africa’s Police Services. 

Source: http://latimesblogs.latimes.com/lanow/2012/08/rudy-ruettiger-stock-scam.html 
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Transportation Sector 

14. August 8, Associated Press - (South Dakota) Workers find pipe bomb on Sturgis 
highway. State workers in western South Dakota found a pipe bomb August 6 on State 
Highway 34 near Belle Fourche. A Butte County sheriff said the homemade bomb was 
about the size of a beverage bottle and had a fuse at the end of it. State and federal 
agents were called in to take the bomb to a safe area and detonate it. The sheriff told the 
Rapid City Journal that authorities had no suspects. 

Source: http://minnesota.publicradio.org/displav/web/2012/08/08/news/workers-find- 
pipe-bomb-on-sturgis-highway/ 

15. August 8, Associated Press - (Colorado) No bomb found on 2 buses evacuated in 
Colorado. A Colorado bomb squad found no explosives after two Trailways buses in 
Loveland were searched when a passenger reported that a bomb threat was made by 
another rider who was later taken into custody. The buses were en route from Salt Lake 
City to Denver August 8 with a scheduled stop in Fort Collins. A sheriff’s spokesman 
said a man from Sacramento, California, was detained. The spokesman said the man is 
believed to be a transient who boarded the bus in Salt Lake City. He said authorities 
received a call about the passenger, contacted the man on a cellphone, and he exited the 
vehicle voluntarily. The two buses were rerouted to a bus stop and deputies evacuated 
96 passengers. The buses were searched and later cleared to leave. 

Source: http://abcnews.go.com/US/wireStorv/trailwavs-buses-evacuated-bomb-threat- 
16956501#.UCKC6qDl-rY 
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16. August 7, Associated Press - (National) FAA suspends operation that led to near- 
collision. The Associated Press reported August 7 that the Federal Aviation 
Administration (FAA) stated it will bar airports nationwide from using a traffic- 
reversing operation that led to a close call July 31 at Ronald Reagan Washington 
National Airport in Arlington, Virginia. No commercial airports will be able to use the 
maneuver, in which controllers direct some planes to take off and land from the 
opposite of the usual direction, until a standardized procedure can be put in place, 
aviation officials said. The FAA expects to have new procedures in place within a 
month, said the FAA chief operating officer. In the meantime, airports can only use the 
maneuver — known as “opposite-direction operations” — in emergencies. The FAA 
made the change after the incident involving three U.S. Airways commuter flights that 
got too close to one another. At the time of the incident, air traffic controllers had been 
changing the direction planes were landing and taking off at the airport because of bad 
weather developing to the airport’s south. The miscommunication occurred between a 
regional air traffic control center in Virginia that guides planes into area airports and 
controllers in the tower at Reagan. Another major issue raised by the incident is that 
managers at the regional control center were also performing administrative tasks, even 
when traffic was heavy or complex and required their undivided attention. The FAA 
chief operating officer said the FAA will ensure that in the future, managers are not 
multitasking while handling complicated air traffic. In addition to creating new 
procedures, the FAA also said it is working with the National Air Traffic Controllers 
Association to determine what additional training, including more radar training, is 
necessary to ensure planes do not come too close to one another. 

Source: http://www.sfgate.com/news/article/FAA-suspends-operation-that-led-to-near- 
collision-3768914.php 

17. August 7, Associated Press - (Texas) Federal safety regulators may seek up to $162 
million in fines from American Airlines, AMR. Federal safety regulators sought up 
to $162.4 million in fines against American Airlines and its affiliates for alleged 
violations of U.S. safety standards going back several years, the Associated Press 
reported August 7. Many of the investigations had not been disclosed until the Federal 
Aviation Administration (FAA) filed documents describing them to the federal court 
handling the bankruptcy case of American and parent AMR Corp. The court documents 
underscore the scope and depth of FAA’s concern about the maintenance program at 
American, the nation’s third-largest airline. They are being revealed just as American 
seeks to fix labor and financial problems and turn itself around after losing more than 
$10 billion since 2001. American said August 7 that it has been working with federal 
officials for several years to improve training and oversight in its maintenance 
operations. 

Source: http://www.washingtonpost.com/business/federal-safetv-regulators-may-seek- 
up-to-162-million-in-fines-from-american-airlines-amr/2012/08/07/63335aa0-e0af- 
Ilel-8d48-2bl243f34c85 story.html 

For more stories, see items 3 and 29 
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Postal and Shipping Sector 



18. August 7, KOLR 10 Springfield - (Arkansas) Fake bomb found near mailbox in 
Boone County, AR. Arkansas’ Boone County Sheriff’s Office was investigating after 
someone left a fake bomb near a mailbox in Harrison, August 6. Officers found a 
plastic container wrapped with tape. The sheriff’s office said there was evidence of 
shrapnel type materials taped around the container. The Bentonville Bomb Squad 
responded and rendered the device safe. The device was reported to have contained 
additional shrapnel materials, but no explosive chemicals or detonation triggers were 
found. It was believed the device went undetected for an undetermined period of time 
before it was found. The department was looking into the matter as an instrument of a 
crime that caused fear of physical injury to the public and the person that found the 
device. 

Source: http://ozarksfirst.com/fulltext7nxd id=685092 

T Return to top i 

Agriculture and Food Sector 

19. August 8, United Press International - (National) U.S. President orders $30M more 
in farm drought aid. The U.S. President said he ordered an additional $30 million to 
help crop and livestock farmers crippled by a “devastating” and “historic drought,” 
United Press International reported August 8. The U.S. Agriculture Department money 
is intended “to get more water to livestock and restore land impacted by drought,” the 
President told reporters before a White House Rural Council meeting on the 
government’s drought response. The administration has “already designated over 1,500 
counties across 32 states as disaster areas, which gives qualified farmers access to low- 
interest emergency loans,” the President said. “We’ve also opened up more land for 
haying and grazing,” he said. “And we’ve worked with crop insurance companies to 
give farmers a short grace period on unpaid insurance premiums, since some families 
will be struggling to make ends meet at the end of this crop year.” 

Source: http://www.upi.com/Top News/US/20 12/08/08/Qbama-orders-30M-more-in- 
farm-drought-aid/UPI- 145 1 1344412800/?spt=hs&or=tn 

20. August 8, Food Safety News - (National) Recalled cantaloupes were sent to 463 Food 
Lion stores. Food Lion received recalled Burch Farms “Caribbean Gold” cantaloupes 
at 463 locations in seven States, the supermarket chain announced August 7. The 
cantaloupes were first recalled July 28 due to a random sample testing positive for 
Listeria monocytogenes. Food Lion published a list of affected stores, which includes 
locations in Georgia, Kentucky, North Carolina, South Carolina, Tennessee, Virginia, 
and West Virginia. Burch Farms’ initial announcement identified “Athena” cantaloupes 
as the variety under recall, before correcting it to be Caribbean Gold. 

Source: http://www.foodsafetvnews.com/2012/Q8/recalled-cantaloupes-were-sent-to- 
463-food-lion-stores/#.UCJef6D6fEU 



21. August 7, Wisconsin State Journal - (Wisconsin) State Fair horse barn put in 
quarantine for several hours. With 300 Clydesdales waiting to leave and the next 
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round of show horses waiting to move in, Wisconsin State Fair officials August 5 put 
the horse bam in quarantine for more than 6 hours while waiting for test results to 
determine if a fatal disease had struck the herd. “We were concerned about the health 
of a few of the horses, there was some coughing and fever,” said the fair’s agriculture 
director. The State fair always attracts a large contingent of Clydesdales, but in 2012, a 
national show was folded into the fair, increasing the number. Horses from several 
States and Canada were stabled, and tight restrictions on travel for sick horses made the 
wait August 5 tense at times. Initial fears were that the dreaded equine herpes virus 
EHV-1 may had been detected, but those fears proved unfounded, the director said. He 
said August 7 that the sick horses were treated for the flu, and there were no casualties. 
Source: http://lacrossetribune.com/news/local/state-and-regional/state-fair-horse-barn- 
put-in-q uarantine-for-several-hours/article 9943c750-e0e7 - 1 1 e 1 - 87f6- 
0019bb2963f4.html?comment form=true 



For another story, see item 31 
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Water Sector 



22. August 8, Norman Transcipt - (Oklahoma) Norman water use outpacing 
supply. Water usage by the city of Norman, Oklahoma, is outpacing its supply, and 
nearly $300,000 worth of Oklahoma City water has been purchased since July 1, the 
Norman Transcript reported August 8. Continued high usage could mean even stricter 
mandatory conservation on outdoor watering. Despite the phase II mandatory 
conservation requirements currently enforced by the city, Norman water usage has 
averaged around 24 million gallons per day (mgd). A significant amount of rain would 
be needed to ease the drain on Lake Thunderbird, the city’s primary source of water. 
Norman purchased 3.6 mgd from Oklahoma City August 6, the 17th consecutive day of 
emergency Oklahoma City water usage. The utilities director said conserving water is 
vital to ensure residents have enough water to drink and enough water for public safety. 
Continued high temperatures also mean large amounts of Lake Thunderbird are lost 
through evaporation. As of August 7, the lake’s conservation pool was slightly more 
than 75 percent full, 4.5 feet below normal. 

Source: http://normantranscript.com/headlines/x614303302/Norman-water-use- 
outpacing-supply 

23. August 8, Yankton Daily Press & Dakotan - (South Dakota) Water plant problem 
prompts use restriction. Due to an equipment breakdown that hindered the municipal 
treatment system, Yankton, South Dakota, officials asked residents to voluntarily 
restrict water usage, the Yankton Daily Press & Dakotan reported August 8. The acting 
city manager said if citizens stop non-essential outdoor water activities, there will be 
plenty of water for normal household uses. Water Treatment Plant No. 2 has two basins 
used to mix chemicals and process them into the water, but one mixer broke down 
August 7. Complicating matters is that the company that manufactured the system has 
been out of business for 20 years. Without the capacity of the mixer, the treatment 
system can still produce about 5.5 million gallons per day (mgd) but demand for water 
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is well above normal due to the drought, regularly surpassing 6 mgd. Officials said high 
demand had nothing to do with equipment failure, as it would be operating anyway. 

The city also faced challenges with a surface water intake in the Missouri River that 
became covered by a sandbar recently. As a result, its capacity was severely limited 
and a temporary intake was erected. 

Source: 

http://www.vankton.net/articles/2012/08/08/communitv/doc5021e03f07a58470403978. 

txt 

24. August 7, Des Moines Register - (Iowa) M’ville water break prompts four day boil 
order. A boil order for water in Mitchellville, Iowa, remained in effect for 4 days after 
a water main broke July 31, leaving several residents without water and others with low 
water pressure, the Des Moines Register reported August 7. The break canceled 
summer school at Mitchellville Elementary, August 2 and 3, and triggered a water 
advisory due to a potential E. coli threat. City officials fixed the break August 3, and 
submitted the first of two water tests required by the State. 

Source: 

http://www.desmoinesregister.com/article/20120807/ALTOONA01/308070052/M- 

ville-water-break-prompts-four-day-boil-order?Frontpage 

For another story, see item 7 
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Public Health and Healthcare Sector 



25. August 8 , Ray com News Network - (Maryland) Walter Reed National Military 
Medical Center reopens after bomb threat. The Walter Reed National Military 
Medical Center (WRNMMC) in Bethesda, Maryland, was evacuated after staff 
received a bomb threat that said a bomb was to detonate at 10 a.m, reported WTTG 5 
Washington D.C. Building 19 was swept by bomb-sniffing dogs and other buildings 
were locked down. WUSA 9 Washington DC reported that an email was sent out to the 
staff calling for a “Code Black.” The email said that no personnel, patients, and visitors 
were allowed in Building 19 and other buildings were on lockdown. The campus of the 
WRNMMC has more than 70 buildings. The Web site for the hospital stated all 
appointments were suspended for 3 hours. 

Source: http://www.ksla.com/storv/19227755/walter-reed-national-military-medical- 
center-reopens-after-bomb-threat 

26. August 7, Computerworld - (National) ‘Wall of Shame’ exposes 21M medical record 
breaches. Over the past 3 years about 21 million patients have had their medical 
records exposed in data security breaches that were big enough to require they be 
reported to the federal government, Computerworld reported August 7. Since 
September 2009, 477 breaches affected 500 people or more each have been reported to 
the Office for Civil Rights (OCR) under the U.S. Department of Health and Human 
Services. In total, the health records of 20,970,222 people have been compromised, the 
OCR said, and 6 health care organizations reported security breaches that involved 1 
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million or more records. Theft made up 54 percent of the breaches, while hacking made 
up only 6 percent of the compromised data. Theft was followed by unauthorized access 
or disclosure for 20 percent, lost records and devices for 1 1 percent, improper disposal 
of records made up 5 percent, and other/unknown categories made up 4 percent. About 
55,000 breach reports involving fewer than 500 records were also reported to the OCR 
from 2009, according to a senior health information privacy specialist with OCR. 
Source: 

http://www.computerworld.eom/s/article/9230028/ Wall of Shame exposes 21M me 
dical record breaches 



27. August 7, CNN - (California) California prosecutors sue Walgreens over waste 
disposal. A group of 35 California district attorneys and 2 city attorneys sued Walgreen 
Co., alleging the drug store chain broke State laws when they disposed of hazardous 
waste, medical waste, and customer records, CNN reported August 7. The lawsuit 
alleged that Walgreens stores improperly disposed of items such as batteries, liquid 
corrosive waste, aerosol cans, and pharmaceutical waste in company trash bins, and 
sent them to local landfills rather than authorized disposal sites. The complaint also 
said Walgreens improperly disposed of customer records containing confidential 
medical information and failed to take required steps to protect privacy. The county and 
city attorneys originally filed a lawsuit in June, asked a judge to stop the company from 
improperly disposing of waste and consider fining the company for allegedly violating 
State laws. 

Source: http://edition.cnn.com/2012/08/07/health/california-walgreens- 
lawsuit/index.html 



28. August 7, U.S. Department of Labor - (Connecticut) US Labor Department’s OSHA 
cites Charter Oak Health Center in Hartford for failing to effectively safeguard 
employees against tuberculosis. The U.S. Department of Labor’s Occupational Safety 
and Health Administration (OSHA) cited Charter Oak Health Center Inc. in Hartford, 
Connecticut, for three alleged serious violations of workplace health standards 
involving inadequate safeguards for employees exposed to tuberculosis and other 
infectious diseases. OSHA’s Hartford Area Office opened an inspection in February 
after receiving a complaint that employees had been exposed to a patient with 
tuberculosis and that the center’s management failed to take appropriate action to 
protect workers. Proposed fines total $17,600. The violations include the center’s 
failure to have a system in place that promptly identifies, masks, and isolates patients 
with suspected tuberculosis; and its failure to provide workers who had face-to-face 
contact with suspected or confirmed tuberculosis patients with training on the disease 
and a respiratory protection program. In addition, the center lacked a hazard 
communication program and hazardous chemical training. A serious violation occurs 
when there is substantial probability that death or serious physical harm could result 
from a hazard about which the employer knew or should have known. 

Source: 

http://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEAS 
ES&p id=22809 

For another story, see item 31 
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Government Facilities Sector 



29. August 8, Santa Maria Times - (California) Bomb scare prompts evacuations. The 
Santa Maria, California Police Station and city attorney’s office were evacuated and 
activity south of the town center was brought to a standstill for much of August 7 by a 
suspicious package that a local man delivered to the station. The package, which turned 
out to be a small safe, was delivered by a man who claimed to have found it in a 
downtown alley. After inspections by the Santa Barbara County Sheriff’s Department 
Bomb Squad and a bomb-sniffing dog, crews moved the safe to another location to be 
detonated. Police became suspicious after the man who delivered the package claimed 
to be a federal agent. Police set up a mobile command center to temporarily serve as the 
police station. A sergeant said local emergency calls in Santa Maria were routed 
through sheriff’s dispatchers most of the day. The item was removed by the bomb 
squad for eventual detonation at a remote area, said a city management analyst. The 
streets surrounding the police station reopened after about 8 hours. 

Source: http://santamariatimes.com/news/local/crime-and-courts/bomb-scare-prompts- 
evacuations/article 95 9dd7c6-e lle-llel-91 ee-00 1 a4bcf8 87 a.html 



30. August 7, Boston Herald - (Massachusetts) Acid spill at Harvard Med School 

prompts evacuation. A chemical spill prompted firefighters to evacuate a building at 
Harvard Medical School in Boston for several hours August 7 after a doctor working in 
a lab spilled several large bottles of acids, according to firefighters. The doctor 
inadvertantly knocked over three bottles containing acids, which rolled off a shelf and 
smashed, said a Boston Fire Department spokesman. The doctor, who was dressed in 
protective lab clothing, immediately jumped under a lab shower to decontaminate. 
Harvard hired a cleanup firm to clean up the spilled bottles, which were about 2 liters 
each and contained acetic and hydrochloric acids. Boston firefighters, who sealed off a 
street during the incident, also conducted air quality readings to ensure the 10-story 
medical school building was safe. According to a Harvard Medical School statement, 
the top three floors of the building would remain evacuated until further notice. 

Source: 

http://www.bostonherald.com/news/regional/view.bg7articleidM061 15 1570&srvc=rss 
For another story, see item 25 
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Emergency Services Sector 

31. August 8, Food Safety News - (Arkansas) Foodborne illness possible cause of 
Arkansas prison illnesses. Health department officials August 7 were all over the 
maximum security Arkansas prison now known simply as the “Tucker Unit” as almost 
half its inmates were down with a mysterious gastrointestinal illness. What was causing 
the illnesses at the Tucker Unit, with a capacity of 796 prisoners, still was not known 
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with the suspect list including foodbome illnesses, and viruses. State health officials 
have stepped up their work to find the source. “The number of inmates who have 
displayed symptoms is at 357,” a spokesman for the Arkansas Department of 
Corrections said. About 15 officials from the Arkansas Department of Health were at 
the prison August 7, interviewing staff and inmates and taking stool samples. Samples 
of all food served in the prison during the last 5 days were also tested. 

Source: http://www.foodsafetvnews.com/2012/Q8/health-department-officials-tuesday- 
were/#.UCJfBqD6eCy 

32. August 7, KBAK 29 Bakersfield; KBFX 58 Bakersfield - (California) Man causes stir 
with grenade delivery to sheriff’s station. A real estate agent brought a live hand 
grenade to the Kern County Sheriff’s Office in Wasco, California August 7. The man 
was inspecting a house when he said he discovered the World War II era grenade with 
the pin in place, the sheriff’s office said. Not sure what it was, the real estate agent took 
the grenade to the sheriff’s substation. The substation was thrust into an emergency 
situation, and the bomb squad was called to safely detonate the grenade. 

Source: http://www.bakersfieldnow.com/news/local/Real-estate-agent-causes-alarm- 
with-grenade-delivery-to-sheriffs-office-165363746.html 

33. August 7, Hanford Sentinel - (California) Corcoran Prison on lockdown following 
Monday riot. Authorities are investigating an 80-inmate riot that broke out at 
California State Prison Corcoran in Corcoran August 6. The violence erupted on the 
facility’s level one yard for minimum security inmates. Wielding manufactured 
weapons, convicts assaulted each other until staff members hit them with pepper spray 
and blast grenades, officials said. Five inmates were injured and were taken to local 
hospitals for treatment, a public information officer said. They have since been returned 
to the facility. Minimum security inmates were on a modified program, or lockdown, 
August 6 and 7. The prison’s Investigative Services Unit was working to determine the 
cause of the violence. 

Source: http://www.hanfordsentinel.com/corcoran-prison-on-lockdown-following- 
monday-riot/article 45f88e60-e0b9-l Iel-81c7-001a4bcf887a.html 

34. August 7, Associated Press - (Montana) Southeastern Montana fire burns Highway 
Patrol communications tower. A southeastern Montana wildfire destroyed a Montana 
Highway Patrol communications tower and knocked out transmissions between 
dispatchers and troopers in nine counties, but officials said August 7, they were able to 
restore those links without any loss of response time. The tower burned August 6 in the 
270-square-mile Rosebud complex of fires on and near the Northern Cheyenne Indian 
Reservation. The tower was the main voice communications hub between highway 
patrol dispatchers in Helena and troopers in western Big Horn, Rosebud, Garfield, 
Treasure, Custer, Prairie, Powder River, McCone, and Carter counties, a spokesman 
said. With the tower destroyed, the voice transmissions had to be rerouted through local 
law enforcement agencies. Data transmissions could still be sent to and from 
headquarters through troopers’ laptops, the spokesman said. Transmissions are 
expected to go through local agencies until the weekend of August 18, when the 
highway patrol plans to temporarily move communications equipment into a 
Northwestern Energy building near the burned tower. 
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Source: http://missoulian.com/news/state-and-regional/wildfires/southeastern-montana- 
fire-burns-highway-patrol-communications-tower/article 8871 Ibd8-e0f3-l lel-ac8c- 
Q01a4bcf887a.html 



For more stories, see items 22, 29, and 42 
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Information Technology Sector 

35. August 8, The H - (International) New Burp Proxy cracks Android SSL. The new 
version of Burp Proxy is designed to improve the analysis of encrypted SSL 
connections on Android phones. Developers and security researchers use Burp Proxy to 
examine the Web traffic on PCs, and also on smartphones. To analyze Web traffic, the 
Burp server is entered as a proxy for HTTP and HTTPS connections on the device, and 
a self-signed CA certificate is installed. This CA certificate allows Burp Proxy to 
generate on-the-fly certificates to imitate an HTTPS server and act as a man-in-the- 
middle. However, the problem on Android phones was these devices initially retrieved 
the target server’s address via DNS and then used the Proxy to access it directly using 
CONNECT. As Burp did not know the server name for which to generate a certificate, 
it used the server’s IP address as a common name, causing error messages or even 
aborted connections on the smartphone. The new version 1.4.12 initially establishes an 
SSL connection to the target server and then tries to imitate the server’s certificate. 
Source: http://www.h-online.com/securitv/news/item/New-Burp-Proxy-cracks- 
Android-SSL-1663112.html 

36. August 8, SecurityWeek - (International) Amazon and Apple change policies after 
journalist is attacked. After a journalist for Wired had his digital accounts breached 
by hackers, and his coverage on the topic exposed how their customer service and user 
experience policies can be exploited for malicious gain, Apple and Amazon adopted 
new policies for account access. Because of that coverage, Amazon said in a statement 
that they “can confirm that the exploit has been closed as of [August 6].” As such, 
Amazon customers can no longer use the phone to alter credit card or other account 
details. While not offering an official statement, Apple also changed their policies. As 
of August 7, Apple will no longer allow Apple ID password requests made via phone. 
Source: http://www.securitvweek.com/amazon-and-apple-change-policies-after- 
journalist-attacked 

37. August 8, The H - (International) Buffer overflows in KOffice and Calligra 
reported. A buffer overflow vulnerability that affects both the KOffice and Calligra 
office suites was disclosed by a researcher from Accuvant Labs. The vulnerability, 
which allows an attacker to execute arbitrary code by exploiting an error in the read() 
function of the ODL Tenderer, was revealed as part of his presentation on near field 
communication hacking at the recent Black Hat conference. The vulnerability is 
exploited by tricking a user into opening a malicious ODL file that then causes a heap- 
based buffer overflow and leads to the attacker’s code being executed. Since KOffice 
runs on the Nokia N9 smartphone, the researcher demonstrated how a maliciously 



- 14 - 



crafted ODF file sent over NFC can be used to execute arbitrary code on the target 
phone. The vulnerability is rated “Highly Critical” by Secunia and, to date, has not 
been fixed in either KOffice or Calligra. 

Source: http://www.h-online.com/security/news/item/Buffer-overflows-in-KOffice- 
and-Calligra-reported-1662884.html 

38. August 8, Info security - (International) One-quarter of websites examined by testing 
service were malicious. One-quarter of the 30,156 Web sites tested in the second 
quarter by Zscaler’s Zulu service, which tests the security of Web sites, were malicious, 
according to Zscaler’s second quarter 2012 State of the Web report. A senior security 
researcher for Zscaler ThreatLabZ cautioned that users of Zulu send suspicious Web 
sites to be tested, so the results are likely to be skewed from the general Web site 
population. “Keep in mind that the service is meant to be receiving suspicious websites 
and reporting results on those sites,” he said. 

Source: http://www.infosecuritv-magazine.com/view/27471/ 

39. August 7, The H - (International) Google forced to temporarily deactivate copy 
protection for Android apps. Google was forced to temporarily deactivate a security 
feature in Android 4.1 (Jelly Bean) intended to make it harder to pirate paid-for 
applications. The feature resulted in some purchased apps no longer working after 
devices on which they were installed on were restarted, requiring the user to 
reconfigure or reinstall them. According to a bug report on Google Code, affected apps 
include several live wallpapers and applications with widgets or access to Google’s 
account system. Android 4. 1 introduced improved copy protection in the form of a 
feature called App Encryption. Paid-for apps are encrypted using a device-specific key 
prior to installation, with the result that the application package file downloaded by a 
device (which can only be accessed on rooted devices) will not run on other Android 
devices. 

Source: http://www.h-online.com/securitv/news/item/Google-forced-to-temporarilv- 
deactivate-copy-protection-for- Android-apps- 1661755 .html 

40. August 7, Threatpost - (International) OpFake, Fakelnst Android malware variants 
continue to resist detection. Android devices have remained a constant target of 
attacks over the second quarter of 2012 thanks in part to new variants from the Fakelnst 
and OpFake families of malware. According to the latest version of the F-Secure 
Mobile Threat Report, the firm found 5,033 malicious Android application packages 
(APKs), a 64 percent increase over the 3,063 the firm identified in the first quarter of 
2012. The report says that out of the 5,000-plus APKs analyzed, 19 new families of 
malware and 21 new variants of previously known families were found. 

Source: http://threatpost.com/en us/blogs/opfake-fakeinst-android-malware-variants- 
continue-resist-detection-0807 1 2 



41. August 7, V3.co.uk - (International) Cyber crooks use of ‘Police Virus’ ransomware 
on the rise. Cyber criminals are now using the infamous “Police Virus” malware as 
fully functioning ransomware, according to a report from security firm PandaLabs. The 
Police Virus is a common technique used by criminals to infect computers by 
masquerading as law enforcement agencies demanding money for fictional crimes. 
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Scams have been detected across the globe demanding money for copyright 
infringement, missed court dates, and even parking tickets. PandaLabs warned that it 
detected the evolution of the scam from standard scareware to ransomware in its latest 
quarterly threat report, which analyzed incidents from April through June 2012. The 
firm went on to warn that the campaigns are continuing to evolve at a rapid pace, with 
criminals creating increasingly effective ways to hold users data to ransom and demand 
payment for its safe return. 

Source: http://www.v3.co.uk/v3-uk/news/2197262/cvber-crooks-use-of-police-virus- 
ransomware-on-the-rise 



For more stories, see items 11 , 12 , 

Internet Alert Dashboard 

To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



42. August 7, Bangor Daily News - (Maine) Crews battling Maine fire making ‘excellent 
progress’. A wildfire that firefighters have been battling since August 4 atop Big 
Spencer Mountain in Maine almost doubled in size August 6, threatening important 
communications equipment used by emergency personnel, and federal and state park 
and forestry officials. Officials hoped to have it under control soon. As of August 6, a 
dozen firefighters and two Maine forest rangers had “made excellent progress” and 
successfully protected two radio repeater towers near the 2 acres of fire-damaged 
ground, a Maine Forest Service lieutenant said. The fire was reported August 4 and 
possibly started at or near the construction site of a new radio tower. The radio 
repeaters are used by a private firm and several State and local agencies, including the 
Maine Forest Service, the Maine Department of Conservation, and the Penobscot 
County Sheriff’s Department. Their loss would have left gaps in the agencies’ radio 
coverage. 

Source: http://www.firehouse.com/news/10756218/crews-battling-maine-fire-making- 
excellent-pro gress 

For more stories, see items 12, 35, 37, 39, and 40 
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Commercial Facilities Sector 



43. August 8, Associated Press - (Connecticut) Police arrest man with handgun at Conn, 
movie. A man with a loaded handgun was arrested at a movie theater in New Haven, 
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Connecticut, August 7. Officers arrived at the Criterion-Bow Tie Cinemas after 
managers reported a man inside with a handgun. The suspect was waiting for the 
Batman film, “The Dark Knight Rises,” to begin and refused officers’ orders to put his 
hands in the air. Police said he was taken into custody by force and charged with breach 
of peace and interfering with police. The gun was in his waistband. The police chief 
praised the nearly 20 officers and 2 sergeants who responded to the call along with 
several Yale University police officers. The suspect has a valid Connecticut permit to 
carry a pistol. 

Source: http://www.thehour.com/news/state regional/police-arrest-man- with- 
handgun-at-conn-movie/article 948417f0-ffa2-5414-bad6-c8de63a695a6.html 

44. August 7, Associated Press - (Washington) 3-alarm fire destroys Lakewood 

furniture business. Wood and paint fueled a large fire August 7 when the Grandwood 
Furniture company in Lakewood, Washington, was destroyed in a three-alarm blaze. 
The West Pierce Fire and Rescue Battalion chief said the 100-foot-by- 150-foot 
commercial building was a total loss. There was no one inside when the fire broke out. 
It was reported by people that drove by in the morning. Due to the danger of the roof 
collapsing, firefighters remained outside and poured water on the fire. There were 13 
engines and other pieces of large equipment with about 50 firefighters at the scene. The 
fire was under control that morning. However, the smoke caused Mount Tahoma High 
School to shut off its ventilation system. 

Source: http://www.kitsapsun.com/news/2012/aug/07/3-alarm-fire-burns-lakewood- 
furniture- store/ 



45. August 7, Memphis Commercial Appeal - (Tennessee) Bomb squad, police respond to 
Germantown call. Two possible bombs were removed from a car outside a condo in 
Germantown, Tennessee, August 6, police said. Residents evacuated from about a 
dozen nearby condos were allowed to return home. The incident occurred when the 
Germantown Police Department (GPD) got a call about suspicious devices at a unit at 
the Farmington Glen condos. Patrol officers responded and saw two devices under the 
driver’s seat of a van parked at a condo, said the GPD deputy chief. They immediately 
called in the county bomb squad. It was later determined two pieces of PVC pipe were 
under the seat, another official said. While no fuses were found on the pipes, one of the 
potential bombs was partially assembled, officials said. The devices contained 
dynamite, it was later discovered. About a dozen other condos near the site were 
evacuated as a precaution. The incident followed the suicide of the man who lived in 
that condo, after a barricade situation July 24. It was his widow who called police after 
finding the devices while going through the van. A third device was removed from the 
area, but it was unclear where it was found. 

Source: http://www.commercialappeal.com/news/2012/aug/07/bomb-squad-police- 
respond-to-germantown-call/ 

For another story, see item 36 
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National Monuments and Icons Sector 



46. August 8, Associated Press - (Oregon) S. Ore. wildfire growing in national forest. A 
lightning-sparked wildfire about 20 miles southwest of Lakeview in south-central 
Oregon has grown dramatically, burning across about 1,500 acres or more than 2 
square miles, the Associated Press reported August 8. The Barry Point Fire was burning 
in the Fremont -Winema National Forest and private lands. A forest supervisor said the 
fire is a holdover from a lightning storm August 5. It grew quickly August 6-7, aided 
by high temperatures, low humidity, and lots of fuel. 

Source: http://www.dailvastorian.com/news/northwest/s-ore- wildfire-growing-in- 
national-forest/article 70326a9c-6f7d-5cd0-876e-e679fcfb5cb3.html 



For another story, see item 42 
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Dams Sector 

47. August 8, KSNV 3 Las Vegas - (Nevada) Man surrenders after standoff with SWAT 
at Hoover Dam. A security breach at the Hoover Dam near Las Vegas, stalled traffic 
for hours after a pickup truck blew through a security checkpoint and sparked a SWAT 
team standoff August 7. Police raised a barrier to trap the driver after he barreled 
through the checkpoint. According to police, the man then barricaded himself inside the 
truck until he surrendered about 90 minutes later. 

Source: http://www.mynews3.com/content/news/local/story/Man-surrenders-after- 
standoff-with-SWAT-at-Hoover/iYn-2R5NkkOveJd w24jEQ.cspx 

48. August 7, Khaleej Times - (International) Rains fuel fear of dam collapse in 
Kerala. Panic prevailed in Iritty town in Kannur district in the state of Kerala, India, 
August 7 with the Pazhassi irrigation dam overflowing and heavy rains lashing the 
northern districts of Kerala August 6 and 7. Several parts of the town were submerged 
in water and the dam started overflowing after officials failed to open eight of the 16 
shutters. The state government sought the help of navy and rapid action force personnel 
to open the remaining shutters and avert an imminent breakdown of the 35 -year-old 
dam. The water can be diverted through an irrigation canal if the shutters are opened. A 
tunnel and some side walls of the dam suffered heavy damage in the rain and the 
landslides. Local people worried that if the rain continued and the other shutters were 
not opened, the dam might burst. The district administration evacuated people living 
around the dam. The heavy rain and landslides wreaked havoc in many other places in 
Kannur and Calicut districts, claiming lives and causing damage to crops, roads, and 
buildings. Weather department officials predicted heavy rains for the area through 
August 8. 

Source: 

http://www.khaleeitimes.com/displavarticle.asp?xfile=data/international/2012/August/i 
ntemational August222.xml&section=intemational&col= 
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